{"slug":"pkg-oracle-80075e9a","name":"pkg-oracle","summary":"Checks whether an npm, PyPI, or crates.io package is safe to install: confirms it exists, flags malicious or typosquatted/slopsquatted names, checks known CVEs (OSV.dev), and pulls its OpenSSF Scorecard. Returns an ALLOW/WARN/BLOCK verdict before your agent installs it.","status":"live","headings":[{"slug":"code","title":"Code & developer tools"},{"slug":"security","title":"Security & risk checks"}],"indexable":true,"listed_since":"2026-10-25T17:51:08.300326Z","sources":[{"source":"x402_bazaar","external_id":"https://mcp-snowy-dew-9447.fly.dev/verify","owner_address":"0xdec42c75e539bf3b9ba0340236e1b9c367312e4a","seen_at":"2026-11-10T06:31:03.524420Z","removed_at":null}],"endpoints":[{"url":"https://mcp-snowy-dew-9447.fly.dev/verify","host":"mcp-snowy-dew-9447.fly.dev","protocol":"x402","state":"live","last_probe_at":"2026-11-09T18:02:17.553812Z","last_ok_at":"2026-11-09T18:02:17.553812Z","tools_count":null,"tools_changed_at":null,"uptime_24h":1.0,"uptime_30d":1.0}],"also_listed_as":[{"slug":"mcp-snowy-dew-9447-fly-dev-6c568364","name":"mcp-snowy-dew-9447.fly.dev"}],"payment_options":[{"endpoint_url":"https://mcp-snowy-dew-9447.fly.dev/verify","network":"eip155:8453","scheme":"exact","rail":"exact","asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","coin":"USDC","asset_label":"USD Coin","amount":"3000","pay_to":"0xdec42c75e539bf3b9ba0340236e1b9c367312e4a","observed_at":"2026-11-09T18:02:17.553812Z"},{"endpoint_url":"https://mcp-snowy-dew-9447.fly.dev/verify","network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","scheme":"exact","rail":"exact","asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","coin":"USDC","asset_label":null,"amount":"3000","pay_to":"HZAqXffHYUPp7KLFGwx3ziHbeTYrxN5Wc5GNyrorSqcW","observed_at":"2026-11-09T18:02:17.553812Z"}],"usage":{"source":"x402_bazaar","unique_payers_30d":8,"paid_calls_30d":9,"last_paid_at":"2026-11-04T03:15:16.833Z","reported_at":"2026-11-10T06:31:03.524420Z"},"assessment":{"method":"2026.10.2","checks":[{"id":"answers","state":"pass","reason":"Answered a check 6 hours ago."},{"id":"owner","state":"fail","reason":"No one has proven control of its domain or of the wallet it is paid at."},{"id":"track_record","state":"fail","reason":"Listed for 15 days; 30 are needed."},{"id":"real_customers","state":"fail","reason":"8 different wallets paid it in 30 days, as the x402 Bazaar reports (not yet counted by addrbook); 10 are needed."},{"id":"clean_scan","state":"not_applicable","reason":"Not an MCP server."}],"passed":1,"applicable":4,"contradicted":false,"computed_at":"2026-11-10T00:31:33.373938Z"},"identity":{"endpoint_domains":["mcp-snowy-dew-9447.fly.dev"],"proven_domains":[],"proven_wallets":[],"namesakes":[],"namesake_count":0,"identity_checks":[],"wallet_attestations":[],"human_backings":[]},"replies":[],"customers":null,"scan":null,"notice":"Not affiliated with addrbook — claim or request removal."}